Pages:
Author

Topic: [GOX] Crime Scene Investigation, Case #MG744 - page 6. (Read 47015 times)

sr. member
Activity: 378
Merit: 250
Born to chew bubble gum and kick ass
This doesn't really prove ...

It is just a hypothesis that I came up with (after I concluded that the official story makes no sense whatsover) that screems to be either confirmed or debunked with evidence.
hero member
Activity: 882
Merit: 501
Ching-Chang;Ding-Dong
And it appears marks site is offline now.

Here's a mirror of the leak:

https://mega.co.nz/#!0VliDQBA!4Ontdi2MsLD4J5dV1-sr7pAgEYTSMi8rNeEMBikEhAs

Be careful opening the .exe (do it in a sandbox).
legendary
Activity: 2170
Merit: 1094
This doesn't really prove there was insider trading / withdrawals (although I tend to believe it was some).
Could have been just experienced traders who recognized a wave B and sold to bag holders.
Not on MtGox, where they couldn't have cashed out, but on other exchanges.
I posted about the top of wave B in January and of course I was laughed at by the uber-bulls.
sr. member
Activity: 378
Merit: 250
Born to chew bubble gum and kick ass
I posted this for hackers https://bitcointalksearch.org/topic/m.5611649 in case they want to investigate more

hero member
Activity: 588
Merit: 501
Just to throw a spanner in the works - is there a possibility that these active coins being tracked were used for staff payments and/or executive bonuses?

I could understand staff entitlements being handed over to a separate entity that was created by or related to Gox such as an employee fund. I'm not sure what staff entitlement protection laws are like in Japan (perhaps someone can elaborate on that) but if this is the case it would explain why such funds are not included as a Gox asset.

In addition to shielding funds from bankruptcy procedures it might also serve as an excellent means of ensuring the silence of ex-employees who don't want to risk the loss of their entitlements.

Thoughts?



entirely possible,

I'm told, one of the primary reasons Mark vehemently defends his employee more than the funds trusted in his care is because many of them know more that they think, and some of them were saying much more than he would wanted.

who are the employees there are many video shots of different people each should be interviewed

New mtgox BTC movements on coinsight, some 70 000 BTC were moved.


http://www.coinsight.org/mtgox.html


aces,

someone has decided to record every one of the transactions associated with a Mt Gox address


great post
 
member
Activity: 98
Merit: 10
New mtgox BTC movements on coinsight, some 70 000 BTC were moved.


http://www.coinsight.org/mtgox.html
legendary
Activity: 1890
Merit: 1031
There is no possibility they used customer funds to pay employees first. 
Thats possible, or they pay mr Pawczyński whit it.
member
Activity: 98
Merit: 10
There is no possibility they used customer funds to pay employees first. 
full member
Activity: 148
Merit: 100
Just to throw a spanner in the works - is there a possibility that these active coins being tracked were used for staff payments and/or executive bonuses?

I could understand staff entitlements being handed over to a separate entity that was created by or related to Gox such as an employee fund. I'm not sure what staff entitlement protection laws are like in Japan (perhaps someone can elaborate on that) but if this is the case it would explain why such funds are not included as a Gox asset.

In addition to shielding funds from bankruptcy procedures it might also serve as an excellent means of ensuring the silence of ex-employees who don't want to risk the loss of their entitlements.

Thoughts?
hero member
Activity: 588
Merit: 501
Additional data to corroborate, delineate, compare, contrast, highlight, and/or provide a pattern


source:  https://bitcointalksearch.org/topic/list-of-major-bitcoin-heists-thefts-hacks-scams-and-losses-old-83794

June 2011 Mt. Gox Incident
Time: June 19, 2011, 06:00:00 PM ± 1 h (theft), days ensuing (hacks & withdrawals)
Victim: Mt. Gox (some claim also customers)
Status: Thief uncaught
Amount:
Stolen by thief: 2000 BTC[4]
Additional withdrawn from Mt. Gox: 643.27 BTC[5] (lower bound)
Total: Lower bound 2643.27 BTC
Equivalent USD: 46970.91 $ (trades on Mt. Gox not reliable at the time)
Equivalent in June 2013 BTC: 473 BTC
Transactions: none released officially
Mt. Gox, then the leading BTC/USD exchange service, suffered a severe breach as a consequence of an ownership change. The sale conditions involved a share of revenue to be remitted to the seller. To audit this revenue, the seller was permitted an account with administrator access.[4]

The seller's administrator account was hacked by an unknown process. The priveleges were then abused to generate humungous quantities of BTC. None of the BTC, however, was backed by Mt. Gox. The attackers sold the BTC generated, driving Mt. Gox BTC prices down to cents. They then purchased the cheap BTC with their own accounts and withdrew the money. Some additional money was stolen by non-attacking traders capitalizing on the dropping price and withdrawing in time, including toasty, a member of BitcoinTalk.

Mt. Gox resolved the hack by reverting trades to a previous version. Many customers claim they have lost money from this reversion, but Mt. Gox claims it has reimbursed all customers fully for this theft. After the incident, Mt. Gox shut down for several days.[6]

The event's scale was widely disputed; some report a theft of almost 500000 BTC due to related account hacking. However, these reports are sparse and disreputable. Closer inspection puts the losses at closer to 2500 BTC.

Aside from the direct damages of the theft, the hack involved a database leak. Some weaker passwords were used to conduct the relatively more severe Mass MyBitcoin Thefts.

Mass MyBitcoin Thefts
NB: Not to be confused with the far more severe MyBitcoin Theft.
Time: 2011-06-20 through 2011-06-21
Victim: MyBitcoin users with weak account passwords
Amount: Exactly 4019.42939378 BTC
Equivalent in June 2013 BTC: 712 BTC
Transactions: all to 1MAazCWMydsQB5ynYXqSGQDjNQMN3HFmEu[7]
Users with weak passwords on MyBitcoin who used the same password on Mt. Gox were in for a surprise after the June 2011 Mt. Gox Incident allowed weakly-salted hashes of all Mt. Gox user passwords to be leaked. These passwords were then hacked on MyBitcoin and a significant amount of money lost.[8]

MyBitcoin estimates indicate 1% of MyBitcoin users were affected.[8] Users that were not affected would be later stolen from anyways, due to the subsequent MyBitcoin Theft.

MyBitcoin Theft
Time: Unknown time in July 2011 (claimed it was a process)
Victim: MyBitcoin & customers
Status: Thief unknown, planned shutdown suspected (disputed theft)
Suspects: “Tom Williams”, likely pseudonym (founder of MyBitcoin)
Amount: Exactly 78739.58205388 BTC
Equivalent USD: 1110544 $ (wt. avg, definitely >$1M, rounded to nearest $)
Equivalent in June 2013 BTC: 10600 BTC
Transaction information: none
Little information was released about the MyBitcoin theft, however, many argue that Tom Williams ran it as a scam (and was not a theft per se). In terms of both dollars and bitcoins, this was by far the largest theft, however, it is possible it was simply a scam. Although MyBitcoin offered to release its code as a gift to the community, it failed to follow through on that promise. In the months ensuing, some evidence has been uncovered supporting mortgage broker Bruce Wagner; however, any evidence is inconclusive.

The theft resulted in the closure of MyBitcoin, which was once a successful Bitcoin company in Bitcoin's early days.

Bitomat.pl Loss
Type: Loss
Time: 2011-07-26
Victim: Bitomat.pl
Status: Coins destroyed (no thief)
Amount: Estimate 17000 BTC (likely estimate/lower bound, no tx due to technical reason)
Equivalent USD: 236000 $ (rounded to nearest thousand)
Equivalent in June 2013 BTC: 2290 BTC
Bitomat.pl, during a server restart, had its remote Amazon service that housed the wallet wiped. No backups were kept. Mt. Gox later bailed bitomat.pl out, and neither customers nor original owners suffered any loss from the incident.


October 2011 Mt. Gox Loss
Type: Loss
Time: 2011-10-28T21:11 (UTC) [blockchain time, off by up to three hours]
Victim: Mt. Gox
Status: Coins destroyed (no thief)
Amount: Exactly 2609.36304319 BTC
Equivalent USD: 8115.12 $ (wt. avg price)
Equivalent in June 2013 BTC: 82.0 BTC
Transactions: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. Gox fully reimbursed customers after this incident.


legendary
Activity: 1890
Merit: 1031
Someon on Reddit made a binary tree of the coins. It's a beautiful thing, I take no credit,I just stole it.



Its so beautiful  but it makes me feel Grin Cry Honestly been waiting to start seeing the abstract art in bitcoin come to life.

I guess that's the one good thing to come from this goxxing.
looks like cancer to me Undecided
sr. member
Activity: 378
Merit: 250
Born to chew bubble gum and kick ass
AGREED - KEEP FOLLOWING THE COINS.

When things start to turn from civil rehabilitation into criminal (or earlier, e.g. when we find someone who can contact Japanese criminal police*), we'll simply give to authorities (police / prosectors and others) a list of addresses / transactions that we suspect have / had the stolen coins.

Then the authorities will turn to exchanges to identify who sold these coins to unrelated buyers / bought back these coins using dark pools.

When authorities have both fiat records and associated / linked bitcoin records / clues, it will be easier for them to connect the dots, finish their investigation quicker, and hopefully we'll know the thuth.

* is it possible to establish who are the detectives at Japanese criminal police that deal with this MtGox's theft?
sr. member
Activity: 274
Merit: 250
AGREED - KEEP FOLLOWING THE COINS.

To add to this, which may be obvious to some:

1) Coins don't move by themselves. People move them. There is a 850k pool of Bitcoin all connected by one element: they are all lost via MtGox. All it takes is ONE transaction, regardless of size, that has a PERSON attached to it. Anyone trying to use or move even a SATOSHI from this pool is risking exposure due to subsequent / downstream spending. Tough to use 850k when this can happen. The entire Blockchain can be traced back to the first Bitcoin.

2 a) We are following large chunks of 40k, 50, 200k, and 180k Bitcoins. Be careful not to loose track of coin movements in smaller amounts - don't just follow thew 200k when another 500k could be getting moved around in sub 1btc amounts. The 200k itself may be a distraction.

2 b) Do we know the REAL total amount of debt and assets held by MtGox? The leaked Emergency Plan and Application for Civil Rehabilitation appear to be conflicting in the total indebtedness. 750btc + 100 btc vs. 6.5 billion Yen. 200k btc is not 750btc. Why are we lowering our expectations of the Bitcoin protocol. (Yeah, we found 200btc, now we can each get 200btc of 850btc back! We each get 1/4 of our investment back.) I've been under the impression from the technicians that the Bitcoin protocol is better than this. We should expect 100% resolution.

3) Bitcoin is based on a trust-less system, yet, not everyone has a) the ability to learn about every working pieces of the protocol or b0 the time to do so. In the end TRUST is required at some level. TRUST is more valuable than any money, because all money is based on TRUST. For Bitcoin to succeed: the masses must TRUST the entrepreneurs, business owners, politicians and money managers who must TRUST the technicians who must TRUST the protocol and its very source. If the TRUST chain is broken at any level, then the Blockchain is worthless.

4) Sometimes TRUST is broken due to mistakes. TRUST can be repaired, albeit slowly, with WORK and FORGIVENESS.


If there are any technicians that would like to rebuild my trust, feel free to reach out. There are at least three of you that have been very silent in the last few weeks, I assume dealing with the broken TRUST. I hope to regain TRUST from you very soon. I am easy to find, not hiding, you know how to reach me.


To the technicians doing the research, THANK YOU. If funds are retrieved and returned, Bitcoin will have my full support and it will be stronger than ever. Until then TRUST chain is broken.




 

hero member
Activity: 588
Merit: 501
If you forget to trace the Fiat heist ...

You can't trace fiat. You do not have tools to do so (but it would be nice if you had such tools). Only bank clerks and police can do it at the moment.

What bank clerks and police won't do is blockchain analysis (they neither care nor understand).



true, but there we go again with that ancillary mention that may turn out to be a pearl of wisdom in disguise -- 'no one talking about the fiat'
perhaps that is a different line of entry to be considered for authorities

in fact I read of one guy who indicated that he sold his btc, transferred it to fiat, requested a wire but it was never processed going back to October or November
sr. member
Activity: 378
Merit: 250
Born to chew bubble gum and kick ass
If you forget to trace the Fiat heist ...

You can't trace fiat. You do not have tools to do so (but it would be nice if you had such tools). Only bank clerks and police can do it at the moment.

What bank clerks and police won't do is blockchain analysis (they neither care nor understand).
zyk
full member
Activity: 224
Merit: 101

What does the emperor do when the masses are unhappy (because they were robbed)? You guessed it - the emperor does olympics or other cheap gimmicks to distract the masses.

So you got your Dorian Satoshi Nakamoto or will get something else.


What does the prime minister do when masses are unhappy (because they were robbed)? You guessed it - the prime minister fires the already wealthy minister or a secretary or issues a new regulation or something like that.

So you will be getting a member of TBI fired or not fired, or something like that.

____________________________________________________________________


Don't get distracted. The only source of objective information for you is the blockchain. So far only blockchain will let you find your formerly owned coins.

If you forget to trace the Fiat heist and subsequently put a dollar claim on the criminals to get them cuffed urgently, all blockchain watching is the real distraction which

enables them to walk away scott free !
member
Activity: 76
Merit: 10
Enemy of the State
update, Via reddit

Quote
MtGox appears to be processing a large chunk of withdrawals. Can the Blockchain experts please correlate if any of the coins moved yesterday were used to pay any of these? You can see the inputs from the API

https://data.mtgox.com/api/0/bitcoin_tx.php

copied a snapshot: http://codepad.org/glJp6iVE

Quote
I traced one of the TXids (taken directly from the mtgox.com api page) back to the 180k wallet https://blockchain.info/address/1KecDYadohxk8MCDqKF8SBEMhCUNveAsCj

txID: https://blockchain.info/tx/00192a3033637161bcfabb0cecb811df1f038a5a2efafa71ecba0a56e53e0426

Just follow the inputs for a couple of addresses, you will get to the 180k one.

This is PROOF gox controlled the 180k.

Source:
http://www.reddit.com/r/Bitcoin/comments/1zw1xe/blockchain_analysis_required/
sr. member
Activity: 378
Merit: 250
Born to chew bubble gum and kick ass

What does the emperor do when the masses are unhappy (because they were robbed)? You guessed it - the emperor does olympics or other cheap gimmicks to distract the masses.

So you got your Dorian Satoshi Nakamoto or will get something else.


What does the prime minister do when masses are unhappy (because they were robbed)? You guessed it - the prime minister fires the already wealthy minister or a secretary or issues a new regulation or something like that.

So you will be getting a member of TBI fired or not fired, or something like that.

____________________________________________________________________


Don't get distracted. The only source of objective information for you is the blockchain. So far only blockchain will let you find your formerly owned coins.
newbie
Activity: 12
Merit: 0
Some scary shit here... havn't read all but someone just took out 40k and 50k from the adresses posted earlier at same time!

https://blockchain.info/address/1P3S1grZYmcqYDuaEDVDYobJ5Fx85E9fE9
https://blockchain.info/address/1cXNTyXj4xPGopfYZNY5xfSM1EPJJvBZV

you propably noticed but iam just saying :d
sr. member
Activity: 504
Merit: 250
If it's actually using the splitBigOutputs() function they should end up in 30k different addresses holding less than 10 BTC each.
It seems that exactly this happened. The addresses that already are down to below 10 BTC have stopped splitting. Others that still contain more are continuing to split. I think this implies pretty strongly that Gox still controls the coins. The good thing is that they still exist. That bad thing is that they chose to lie about it so they probably weren't planning on returning them..

Lost coins cant be moved. Mark Karples has turned himself in.. wtf going on, if he wanted to steal these why turn yourself in. Whos moving the coins.

is it Skynet  Grin

Maybe Skynet took over Gox.
Pages:
Jump to: